
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
File: 3693BDB8D9539D53978D42B71411F72DA033C8CE.mft (raw, json)
Hash identifier: 5SQh7p69KnkuG28AnM+DIQfNJxqVSQ7HNDX8jYGsme8=
Subject key identifier: 73:B0:98:D5:11:56:54:D9:58:B2:68:B1:9C:25:CE:19:0D:38:72:C2
Authority key identifier: 36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
Certificate issuer: /CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Certificate serial: 57404991105F5A9EA0E49A1A702B2706C88564AC
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
Manifest number: C2
Signing time: Wed 23 Sep 2026 20:05:50 +0000
Manifest this update: Wed 23 Sep 2026 20:00:50 +0000
Manifest next update: Thu 24 Sep 2026 21:30:50 +0000
Files and hashes: 1: 3693BDB8D9539D53978D42B71411F72DA033C8CE.crl (hash: NFgzsI/wKKJiqh9o5PYDUj5kgfdwNrqCdrTTLtbYLGc=)
2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: jSE6GYUud3AuGy6/ruvI9yrqiBFhTM+Gr4dy4Eh9xGg=)
3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: WqTCn5j59dOFJUOOhy3KFyXF/4R8dQGK4UV0a5vcULQ=)
4: 3130332e3134322e32312e302f32342d3234203d3e20313339393536.roa (hash: bAc9RLO23BGn7FV3ehHaNXdYHbfpmRikpiaRJEbpm9w=)
5: 3130332e3133332e35362e302f32342d3234203d3e20313338313331.roa (hash: ygnIvxWNgcK1plnIZrJxs3dfEQPzyHrhskTC9g4HRXE=)
6: 3130332e3134322e32312e302f32342d3234203d3e20313338313331.roa (hash: c8/N6Mnq9mJVhr1EK8ir1JGtt4U3UW5BenMICe3Zx1c=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 21:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:40:49:91:10:5f:5a:9e:a0:e4:9a:1a:70:2b:27:06:c8:85:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3693BDB8D9539D53978D42B71411F72DA033C8CE
Validity
Not Before: Sep 23 20:00:50 2026 GMT
Not After : Sep 24 21:30:50 2026 GMT
Subject: CN=73B098D5115654D958B268B19C25CE190D3872C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:07:b7:2c:ba:61:b0:38:84:31:dc:79:3b:29:
45:83:d8:8a:21:48:e6:b2:2b:7d:e6:1f:7a:06:69:
3c:8b:74:c2:81:64:88:82:b5:a3:c3:a4:b3:fb:bb:
92:14:a3:ab:e6:79:17:f2:96:7f:2d:38:eb:2e:2b:
2e:5e:08:38:08:0b:d5:1b:0c:ef:76:dc:bb:2c:aa:
17:55:63:44:6e:f0:70:a2:64:37:2c:82:c8:85:b7:
87:66:d3:43:6c:bc:80:7a:2b:fd:12:77:96:68:ba:
18:19:de:a1:ca:37:a4:c6:62:18:b4:45:58:2a:26:
e2:d1:59:07:51:d4:d2:e2:ea:d7:d4:f8:8f:31:8b:
47:de:8c:71:27:3e:a1:ce:f9:01:2e:2b:cc:05:0b:
12:11:69:4f:be:15:55:75:c5:5f:04:0c:aa:9f:ff:
d0:91:a6:ce:3b:4f:8e:cb:84:e3:c0:22:dc:7a:04:
af:6c:5b:b1:46:53:da:e9:4f:c0:e1:f9:43:20:30:
4b:a6:41:16:61:25:e1:4b:b8:cf:3f:6a:2f:ec:48:
b5:6c:1e:22:27:f7:36:2e:a2:60:7b:78:8a:d5:ef:
57:18:b4:75:0c:3a:1f:e8:63:a3:0e:ef:a4:15:3c:
78:23:42:c7:08:a6:c2:80:05:bc:52:78:85:e2:65:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B0:98:D5:11:56:54:D9:58:B2:68:B1:9C:25:CE:19:0D:38:72:C2
X509v3 Authority Key Identifier:
keyid:36:93:BD:B8:D9:53:9D:53:97:8D:42:B7:14:11:F7:2D:A0:33:C8:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3693BDB8D9539D53978D42B71411F72DA033C8CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/3693BDB8D9539D53978D42B71411F72DA033C8CE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:76:3a:f8:f5:d3:18:ad:e1:29:05:a0:1b:81:91:db:4d:be:
30:c9:b3:71:87:8a:17:9a:2c:f0:93:6f:61:4d:5c:23:2d:87:
67:45:9f:31:ff:29:87:c7:ee:a5:c7:95:d7:cf:f3:40:e6:53:
12:3f:43:8a:ae:6f:6c:ed:bc:d7:07:83:05:5e:ef:38:27:2c:
8e:fd:ab:44:65:3a:b8:51:fc:ff:6b:73:98:f2:5a:70:7d:5f:
9e:dc:8c:1e:4d:f0:64:a2:2e:ad:56:24:7a:a0:7c:9d:8c:95:
79:0e:55:aa:0e:26:6d:c0:da:3b:d0:0c:68:b7:15:8c:3b:95:
92:b1:5c:4e:b7:d4:dd:79:89:dc:17:e1:0a:bb:e6:0e:76:26:
15:f2:b2:e0:43:fb:da:be:f9:78:8e:96:8d:e2:17:26:55:1d:
5d:98:10:a6:e5:e3:df:04:0d:c7:7b:55:1e:ef:80:a4:34:ea:
6c:97:0e:53:51:a9:0c:00:18:4d:6d:b7:dd:8c:e7:c5:f2:a0:
2e:4a:29:50:ab:2e:1e:ae:66:3b:bc:80:cb:b3:8f:89:e0:69:
1c:65:4b:70:3d:0c:52:e1:ef:fc:d9:a1:fd:1e:46:6f:9a:db:
50:ed:eb:9d:42:c8:7c:df:11:0b:b5:c1:23:c3:76:ab:e7:f4:
25:d1:5b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:37:56 2026 by rpki-client